Solved

Active Directory Password Reset and Account Unlock

Posted on 2010-09-14
3
901 Views
Last Modified: 2012-05-10
Hi All,

I am trying to understand in details as to how "Active Directory Password Reset and Account Unlock" works. Do we require PDC emulator to change the password and unlock the accounts. If the users are not able to reach PDC will they be able to change their passwords and unlock accounts. Will they face any issue.

As per my understanding the password is changed locally on the Domain Controller and PDC gets the prefrential update of the same and if the PDC is down the users will be able to change the password but I am not very sure how unlock works.

Please let me know if anybody has any document related to this.

Thanks
Sukhwinder
0
Comment
Question by:Neo_78
3 Comments
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 84 total points
Comment Utility

The users do not need the PDC in order to Change or Unlock the passwordo. It is true that the PDC can help the process of replication in scenarios where you have multiple DCs because these changes sync in Urgent Mode with the server

If the PDC is offline, the user will be able to change or unluck his/her password and when the PDC come back online it will sync the Domain partition with the new changes


0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 83 total points
Comment Utility
Since Windows 2000 there is really no such thing as a PDC and BDC anmore, though there is still a PDC Emulator largely for legacy purposes. All copies of active directory are updateable, the client needs to contact only one DC - any one, and the changes are replicated automatically to all the others.
0
 
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 83 total points
Comment Utility
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now